Improper Access Control

🗓️ 16 May 2026 05:25:29Reported by Veracode Vulnerability DatabaseType

Traefik improper access control lets attackers with HTTP Route permissions access internal API and change config.

Reporter	Title	Published	Views	Family All 25
FreeBSD	traefik -- Unauthorized exposure of the REST provider	15 May 202600:00	–	freebsd
ATTACKERKB	CVE-2026-44774	15 May 202616:30	–	attackerkb
Circl	CVE-2026-44774	11 May 202615:10	–	circl
CNNVD	Traefik 访问控制错误漏洞	15 May 202600:00	–	cnnvd
CVE	CVE-2026-44774	15 May 202616:30	–	cve
Cvelist	CVE-2026-44774 Traefik: Gateway API TraefikService backend accepts rest@internal, allowing unauthorized exposure of the REST provider despite providers.rest.insecure=false	15 May 202616:30	–	cvelist
EUVD	EUVD-2026-30566	15 May 202616:30	–	euvd
Tenable Nessus	FreeBSD : traefik -- Unauthorized exposure of the REST provider (4e221ca1-573a-11f1-9f6d-5404a68ad561)	26 May 202600:00	–	nessus
Tenable Nessus	Traefik 2.x < 2.11.46 / 3.x < 3.6.17 / 3.7.x < 3.7.1 Authentication Bypass (CVE-2026-44774)	15 May 202600:00	–	nessus
Github Security Blog	Traefik: Gateway API TraefikService backend accepts rest@internal, allowing unauthorized exposure of the REST provider despite providers.rest.insecure=false	13 May 202615:29	–	github

Vulners

Node

traefik github.com/traefik/traefikRangev1.0.alpha.0e683cc5355bc507dabac68bbc7559d3f179e185–1.0.alpha.0e683cc5355bc507dabac68bbc7559d3f179e185go

Source	Link
github	www.github.com/traefik/traefik/releases/tag/v2.11.46
github	www.github.com/traefik/traefik/releases/tag/v3.6.17
github	www.github.com/traefik/traefik/commit/1337363cf6b590ab3df97e9fb766c16293bcb2b0
github	www.github.com/traefik/traefik/releases/tag/v3.7.1
github	www.github.com/advisories/GHSA-96qj-4jj5-wcjc